$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: C4y3hHUP/HlH5EoWzUNLx9b63njeiTltdbYMNkz2RcY= Subject key identifier: FC:8F:4E:87:D1:DE:C4:B4:20:C7:AF:17:28:1D:34:F9:B2:04:DF:5E Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 04F8 Signing time: Sun 01 Mar 2026 00:18:59 +0000 Manifest this update: Sun 01 Mar 2026 00:18:58 +0000 Manifest next update: Sun 08 Mar 2026 00:18:58 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: 2UsnIkyuAtN56DleIZxRhHp2p551jGxw/OUdhlmYK7o=) 2: E097013E910C11EFB994E187C4F9AE02.roa (hash: vrgdHN+EQa1Kq7q/Jj9Y5Q0FA9lEQE1lA2kxOo5yBEc=) 3: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: FXBB9DdsLSCSLqmcy5GfEeeUEH9NAw4i9aMiOHO8iOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Mar 1 00:18:58 2026 GMT Not After : Mar 8 00:18:58 2026 GMT Subject: CN=69a385f2-228a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:30:db:32:3c:71:57:33:a2:4c:20:6b:bb: fa:06:1b:9e:eb:43:63:77:49:5e:41:04:7e:24:83: 17:cf:bc:b6:54:a0:72:21:05:ec:51:ae:9f:18:71: 73:f1:5d:31:a1:89:24:0d:12:4f:80:30:5c:ec:d1: 94:2e:1f:58:0d:67:7e:5e:4c:8a:9b:8f:35:8e:37: a7:d8:d2:43:35:d2:ee:65:63:d1:b3:51:b4:ff:2c: 1e:73:61:e3:d1:a3:82:32:f1:ef:cc:84:0f:0f:a1: e8:fa:3d:b8:6a:2b:64:85:5a:6a:55:d6:77:ce:82: 36:a7:43:04:17:d4:23:10:cd:6d:be:2b:92:a4:5f: 95:56:c5:ac:06:e2:33:7e:e7:1a:5c:7e:8a:1c:16: 2e:58:02:f1:e1:73:31:09:c4:8f:1f:27:6e:f1:dd: 60:d6:1b:09:3e:a3:b1:b9:83:23:96:c9:51:67:bd: ef:2a:ca:7d:f8:a3:01:2e:1f:55:4d:1e:2a:12:43: ca:a0:38:eb:6f:41:8b:3c:8f:52:a8:99:95:7e:73: 56:8a:7b:f9:c6:16:8c:8e:64:db:06:11:45:ea:78: c8:d2:c4:eb:49:61:23:ec:7b:2a:90:db:51:10:2c: 76:f0:45:09:7f:c0:ca:09:b5:a7:4c:6d:78:ac:98: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:4E:87:D1:DE:C4:B4:20:C7:AF:17:28:1D:34:F9:B2:04:DF:5E X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:5f:a3:9f:80:8b:56:38:62:1b:79:fe:0a:c8:f6:4c:8c:db: 70:7a:4d:dd:c9:e3:50:20:cf:bc:7d:8e:39:6b:a3:ef:c8:40: a0:dd:9a:a7:5c:06:1e:d0:69:76:15:83:ed:74:92:59:9d:e3: 9f:50:d2:be:7f:12:8b:02:cd:d7:fa:8d:2a:15:13:9b:20:cc: 41:55:f3:96:51:48:f7:32:25:14:e7:9a:09:37:da:5d:75:e3: 7c:2e:d9:44:e1:04:e1:55:c9:61:09:b2:db:bb:b2:00:78:ee: d7:05:73:9e:c8:6e:c3:3e:bc:3e:31:0e:e3:69:b8:ee:9a:46: 84:c8:30:b4:a1:a0:92:d3:f6:5e:09:1b:9c:74:1d:b9:15:65: 31:a6:24:07:f4:8a:41:0c:c1:88:3b:9d:70:b1:e1:ee:7c:2c: cf:59:6e:c0:e3:df:78:73:ac:05:c4:f8:2e:bf:3b:af:03:24: 1a:c9:bb:d3:7b:7a:1f:03:4e:7e:05:82:9d:e2:14:fb:fd:17: d2:db:75:ba:3e:cd:5e:b2:31:57:18:70:c3:ff:e1:3d:a8:bf: 5b:6f:eb:ab:6a:57:48:c7:a4:2b:55:64:98:dc:00:b1:72:b3: a5:1c:ab:76:b9:7b:35:47:e4:02:d0:6a:4f:14:7b:e2:1b:b6: 19:13:fc:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjYwMzAxMDAxODU4WhcNMjYwMzA4MDAxODU4WjAYMRYwFAYD VQQDDA02OWEzODVmMi0yMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5Aw2zI8cVczokwga7v6Bhue60Njd0leQQR+JIMXz7y2VKByIQXsUa6fGHFz 8V0xoYkkDRJPgDBc7NGULh9YDWd+XkyKm481jjen2NJDNdLuZWPRs1G0/ywec2Hj 0aOCMvHvzIQPD6Ho+j24aitkhVpqVdZ3zoI2p0MEF9QjEM1tviuSpF+VVsWsBuIz fucaXH6KHBYuWALx4XMxCcSPHydu8d1g1hsJPqOxuYMjlslRZ73vKsp9+KMBLh9V TR4qEkPKoDjrb0GLPI9SqJmVfnNWinv5xhaMjmTbBhFF6njI0sTrSWEj7HsqkNtR ECx28EUJf8DKCbWnTG14rJhFCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyPTofR 3sS0IMevFygdNPmyBN9eMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASV+jn4CLVjhiG3n+Csj2TIzbcHpN3cnjUCDPvH2OOWuj78hAoN2ap1wGHtBp dhWD7XSSWZ3jn1DSvn8SiwLN1/qNKhUTmyDMQVXzllFI9zIlFOeaCTfaXXXjfC7Z ROEE4VXJYQmy27uyAHju1wVznshuwz68PjEO42m47ppGhMgwtKGgktP2XgkbnHQd uRVlMaYkB/SKQQzBiDudcLHh7nwsz1luwOPfeHOsBcT4Lr87rwMkGsm703t6HwNO fgWCneIU+/0X0tt1uj7NXrIxVxhww//hPai/W2/rq2pXSMekK1VkmNwAsXKzpRyr drl7NUfkAtBqTxR74hu2GRP8Rw== -----END CERTIFICATE-----Generated at Mon Mar 2 01:13:10 2026 by rpki-client